feat(ECR-010): Ops-E 系统运营；修复登出解绑；P2 Complete

落地管理员 RBAC/封禁/推送任务 stub，logout 解绑 device 并统一各页 ensureAccount，同时收口 P2 生日生成与状态文档。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/auth.go

@@ -77,7 +77,8 @@ func (h *AuthHandler) Login(c *gin.Context) {
 // Logout handles POST /auth/logout.
 func (h *AuthHandler) Logout(c *gin.Context) {
 	tok := bearerToken(c)
-	_ = h.Svc.Logout(c.Request.Context(), tok)
+	deviceKey := c.GetHeader(middleware.DeviceKeyHeader)
+	_ = h.Svc.Logout(c.Request.Context(), tok, deviceKey)
 	response.OK(c, gin.H{"ok": true})
 }